Can someone explain to me how the ack and sequence information in a packet
is used when establishing a connection?
Thanks
aaron
___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupst
Hi Folks:
On a 10-half ethernet connection between two routers, we are seeing deferred
packets happening as well as the normal usual collisions. Are deferred
packets just normal as well? Is it expected in ethernet media? Thanks in
advance...
David Luong
CCNP,CCNA,Network+,A+,i-Net
could you please specify what protocol your talking about that might help.
> -Message d'origine-
> De: Aaron Hite [SMTP:[EMAIL PROTECTED]]
> Date: mercredi 24 mai 2000 05:32
> À:[EMAIL PROTECTED]
> Objet:packets
>
> Can someone explain to m
I am sorry. I was referring to the IP stack.
thanks
aaron
___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROT
Since you didn't specify the protocol, I am going to assume you mean for a
TCP connection.
When one side wants to set up a connection with the other side, it does a
"three-way handshake" by doing the following:
A -> Sends SYN=1, ACK=0, SEQ=1000, ACK#=0
B -> Replys ACK=1, SYN=1, SEQ=5000, AC
Not to be too nit-picky but that third part of the TCP handshake should
be:
A -> Replys ACK=1, SYN=0, SEQ=1001, ACK#=5001
SYN should be 0 there not 1. probably just a typo.
> A -> Sends SYN=1, ACK=0, SEQ=1000, ACK#=0
> B -> Replys ACK=1, SYN=1, SEQ=5000, ACK#=1001
> A -> Replys ACK=1, SYN=1
At 05:20 AM 5/25/2000 -0700, Michael Fountain wrote:
> The SEQ field is a randomly generated number that the sender generates to
>show where it will start at. It then increments this value by one for every
>packet it sends
For every BYTE it sends. TCP sequences every byte. The sequence numb
Thank you.
aaron
___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Dear all,
I'm a little bit confused with the update time interval for hello
packets sent in OSPF and EIGRP. by default, is it 10s or 5s ?
Thanks
--
¨Ó¦Û¸t¦ã¦ÌÀs¬Pªº¤p©ú©ú¶W¤H
___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ,
Hi all,
I've been doing some debugging of EIGRP packets and noticed that Hello
packets are sent to the Loopback interface when configured:
Feb 2 13:47:29 pst: EIGRP: Sending HELLO on Loopback0
Feb 2 13:47:29 pst: AS , Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely
0/0
Feb 2 13:47:2
How can I configure AS5800 to send session ID in accounting packets?
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
:[EMAIL PROTECTED]]
Sent: Monday, July 17, 2000 12:40 PM
To: Luong, David
Subject: Re: Deferred Packets
Deferred packets are a normal part of an ethernet transmission.
If multiple hosts attempt to transmit over the same ethernet media at the
same
time, a collision occurs. After a specified period of
;To: Luong, David
>Subject: Re: Deferred Packets
>
>
>
>
>Deferred packets are a normal part of an ethernet transmission.
>
>If multiple hosts attempt to transmit over the same ethernet media at the
>same
>time, a collision occurs. After a specified period of time, both pa
gt;-Original Message-
> >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> >Sent: Monday, July 17, 2000 12:40 PM
> >To: Luong, David
> >Subject: Re: Deferred Packets
> >
> >
> >
> >
> >Deferred packets are a normal part of an ethernet tran
Ethernet uses CSMA/CD, Appletalk uses CSMA/CA (Collision Avoidance). Hope
this helps.
David
-Original Message-
From: Luong, David [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 17, 2000 4:19 PM
To: '[EMAIL PROTECTED]'; 'Cisco Group Study'
Subject:
Monday, July 17, 2000 4:19 PM
>To: '[EMAIL PROTECTED]'; 'Cisco Group Study'
>Subject:RE: Deferred Packets
>
>Further to your response, a fellow co-worker of mind has mentioned that
>ethernet used CSMA/CD 802.3 instead of CA? Is it possible for ethernet media
Ethernet uses CSMA/CD
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Stylen
> Sent: Monday, July 17, 2000 9:15 AM
> To: [EMAIL PROTECTED]
> Subject: Re: Deferred Packets
>
>
> no, ethernet is always CSMA/CD. I bel
]
Government Micro Resources
Network Operations Control Center
Bldg 33 NAVSEA NCOE
757-393-9526
-Original Message-
From: Luong, David [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 17, 2000 5:19 PM
To: '[EMAIL PROTECTED]'; 'Cisco Group Study'
Subject: RE: Deferred Packe
Control Center
> Bldg 33 NAVSEA NCOE
> 757-393-9526
>
>
>
> -Original Message-
> From: Luong, David [mailto:[EMAIL PROTECTED]]
> Sent: Monday, July 17, 2000 5:19 PM
> To: '[EMAIL PROTECTED]'; 'Cisco Group Study'
> Subject: RE: Deferred Packets
>
(Brad) CONT NNSY; 'Luong, David'; 'Cisco Group
Study'
Subject: RE: Deferred Packets
Can you guys tell me what is the difference between CD
and CA? Detection and Avoidance?
Thanks
Kent
--- "Stanfield Hilman B(Brad) CONT NNSY"
<[EMAIL PROTECTED]> wrote:
> 80
I don't mean to be picky, but 802.11 is not wireless Ethernet. The press
sometimes calls it that, but the spec does not. Since it uses CSMA/CA I
would say it is definitely not Ethernet. ;-)
I'm glad you brought up this very cool technology, though. I use it, by the
way, and am very happy with
CTED]
> > Government Micro Resources
> > Network Operations Control Center
> > Bldg 33 NAVSEA NCOE
> > 757-393-9526
> >
> >
> >
> > -Original Message-
> > From: Luong, David [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, July 17, 2000
Defered packets occur when the ethernet is too busy
and the interface can't put the packet out on the
wire, so the packet is dropped. This is normal. I
would throw a sniffer on this segment and see whats
going on and try to clean it up.
--- "Luong, David" <[EMAIL PROTECTED]&
On Nov 3, 5:28am, Erick wrote:
}
} > On a 10-half ethernet connection between two
} > routers, we are seeing deferred
} > packets happening as well as the normal usual
} > collisions. Are deferred
} > packets just normal as well? Is it expected in
} > ethernet media? Thanks i
>
> } Defered packets occur when the ethernet is too
> busy
> } and the interface can't put the packet out on the
> } wire, so the packet is dropped. This is normal. I
>
> Bzzt, wrong! The packet isn't dropped, it's
> held and transmitted when the w
Packets are counted to be deferred are due to
15 successive collisions to happen after first send attempt-
the CSMA/CD algorythm version used propose the cut of the back off
algorythm on the 16th attempt (first 10 attempts the timeout (ralli- the RND
function multiplier) is doubled each time-
up
At 12:54 PM 7/19/00, Ruslan S Tchinyakov wrote:
>Packets are counted to be deferred are due to
>15 successive collisions to happen after first send attempt-
>the CSMA/CD algorythm version used propose the cut of the back off
>algorythm on the 16th attempt (first 10 attempts the ti
On Nov 3, 10:39am, Erick wrote:
} Subject: Re: Deferred Packets
} >
} > } Defered packets occur when the ethernet is too
} > busy
} > } and the interface can't put the packet out on the
} > } wire, so the packet is dropped. This is normal. I
} >
} > Bzzt, wrong!
On Dec 9, 7:30am, "Ruslan S Tchinyakov" wrote:
}
} Packets are counted to be deferred are due to
} 15 successive collisions to happen after first send attempt-
} the CSMA/CD algorythm version used propose the cut of the back off
The first two letters here stand for "Carrie
On Dec 9, 6:25am, Priscilla Oppenheimer wrote:
}
} This means that it's kind of a useless statistic since deferring because
} the medium is already in use is absolutely normal on a shared and/or
} half-duplex Ethernet. The threshold where it would be considered abnormal
I don't know if
Dear all,
The Lan traffic works on CSMA/CD technique. When it senses that the traffic
can be sent over the wire it goes smoothly. If there is a lot of traffic on
the wire, then it has to wait for sometime, otherwise the packets will be
lost after some specified period. Bcos it does not listen to
I beleive it's ten by default in OSPF, not sure about EIGRP.
-Brad CCNA
At 01:40 PM 5/28/00 +0800, Jacques Lee wrote:
>Dear all,
>
>I'm a little bit confused with the update time interval for hello
>packets sent in OSPF and EIGRP. by default, is it 10s or 5s ?
>
>Th
I Think is it 10seconds for OSPF, I know it is 5seconds for EIGRP
>
>At 01:40 PM 5/28/00 +0800, Jacques Lee wrote:
> >Dear all,
> >
> >I'm a little bit confused with the update time interval for hello
> >packets sent in OSPF and EIGRP. by defau
/28/00 +0800, Jacques Lee wrote:
>> >Dear all,
>> >
>> >I'm a little bit confused with the update time interval for hello
>> >packets sent in OSPF and EIGRP. by default, is it 10s or 5s ?
>> >
>> >Thanks
>> >
>
>___
hello Jaq ..
I've read recently the OSPF and EIGRP in the ACRC course , I didn't revise
it yet so I maybe wrong but what I know about this is that
1-the hello intervel in ospf is 10 sec by default in multiarea configuration
.
2-the hello packets are used to verify the state os th
Phil.
--- James Haynes <[EMAIL PROTECTED]> wrote: > Hi
all,
>
> I've been doing some debugging of EIGRP packets and
> noticed that Hello
> packets are sent to the Loopback interface when
> configured:
>
> Feb 2 13:47:29 pst: EIGRP: Sending HELLO on
> Loopback0
shing as well is miniscule. It looks more likely
> that Cisco have put it in for completeness.
> I would guess that the extra CPU overhead is also
> very
> small as well.
>
> Regards,
>
> Phil.
>
> --- James Haynes <[EMAIL PROTECTED]> wrote: >
> Hi
&
Can anyone explain why incrementing unicast packet counters on a Cat6000 is
a negative thing? I can't seem to find anything that says this is
undesirable. Am I missing something? Thanks.
John
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/
hi to all
Our cisco 7100 router sends tftp read request packets to 255.255.255.255
frequently. There is nothing about tftp in configuration. Is there anybody
has
an idea what may caiuse this?
thanks all...
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41018&
n LAN as
well as on ATM.When the device is configured for managing in the
LAN,everything goes fine and none of the UDP packets gets lost.But when the
device is configured for managing in ATM I see lot of ICMP redirects come
from 7500.The UDP packets doesn't even reach the device.Also I notice
Depending on hardware/software versions it would be bad if all the traffic
is expected to be switched in hardware.
Only traffic that the software sees is usually counted.
Try using an acl like this:
access-l 100 permit ip any any log
the log keyword will force the traffic to be switched in sof
When sniffing a TCP conversation on NAI Sniffer pro. why do ack only packets
show a length of 60 bytes when the minimum ether frame should be 64
?/ where are the other 4 bytes
Chris Burnham,
Systems Engineer,
Delphis Consulting Plc.
Tel: +(44) 020 7916 0200
Mob: +(44) 07799403576
I've just thought of something .The only part of an 802.3 or EV2 frame
that is 4 bytes is the FCS. Is the sniffer not reading these bytes???
Chris Burnham,
Systems Engineer,
Delphis Consulting Plc.
Tel: +(44) 020 7916 0200
Mob: +(44) 07799403576
[EMAIL PROTECTED]
This e-mail and any fil
Does anyone know of any URL's or have any info on the paket budgets (pps) of
all of the router range.
Chris Burnham,
Systems Engineer,
Delphis Consulting Plc.
Tel: +(44) 020 7916 0200
Mob: +(44) 07799403576
[EMAIL PROTECTED]
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1
Hello Everyone,
I have this router which will give me the debug message everytime I ping a
connected network:
Every interfaces, ATM, FastEthernet, Serial etc are same results.
Seemed like there are no arp cache for the connect interfaces, but I do not
know the solution to solve this problem!!!
this is known as configuration auto-loading
to disable on a router use:
no boot network
no service config
hope this helps
Mark
""Semih \st|n"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> hi to all
> Our cisco 7100 router s
thanks.
it worked.
Semih
- Original Message -
From: "Mark Patrick"
To:
Sent: Wednesday, April 10, 2002 3:14 PM
Subject: Re: tftp packets [7:41018]
> this is known as configuration auto-loading
>
> to disable on a router use:
>
> no boot network
> no
4/10/02, Semih \st|n wrote:
>hi to all
>Our cisco 7100 router sends tftp read request packets to 255.255.255.255
>frequently. There is nothing about tftp in configuration. Is there anybody
>has
>an idea what may caiuse this?
>thanks all...
Priscill
the debug ntp packets command shows packets sent and received with different
modes. What are these modes? can some one explain?
R5-2503#
Mar 6 02:42:08.879: NTP: rcv packet from 10.10.10.1 to 10.10.10.2 on BRI0:
Mar 6 02:42:08.883: leap 0, mode 2, version 3, stratum 8, ppoll 64
Mar 6 02:42
Hi,
Has anyone seen a problem with the 11050 load balancer dropping packets from
http 1.1 browsers? Http 1.0 seem to work fine but 1.1 doesnt seem to send the
full header info and the 11050 drops packets like mad.
Software version 4.00 build 3
Hardware Major version: 02
Hardware Minor version: 0
Hello everybody,
I am wondering if there is any tool like Sniffer / Ethereal which
allows capturing and analysing IPv6 traffic?
Thanks,
Rajesh
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73033&t=73033
--
FAQ, list archives,
Hi all...When I do a "show frame-relay pvc" on our Internet Router, the
following statistics bother me;
in FECN pkts 12974
dropped pkts 27
We have recently been experiencing some noticeable slow downs on our
Internet connection, do these statistics prove that we have
We are currently experiencing a DOS attack where the attacker is sending
ICMP Requests, say 40 a second, to an address on our network that does not
have a device hooked up to it. Looking at the tcpdump, all it is is a bunch
of requests, no replies, no "unavailables", etc. Even though it's not
hi
I am getting lot of broadcast packets on FastEthernet interface when I do sh
interface on cisco 7505. I also
get "input errors" on that interface and big ping (up to 1200ms) latency to
isdn sites.
What to expect if I turn off these broadcasts ? Do I
need receive broadcast packets on
ham, Chris"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> When sniffing a TCP conversation on NAI Sniffer pro. why do ack only
packets
> show a length of 60 bytes when the minimum ether frame should be 64
> ?/ where are the other 4 bytes
CRC field is also 4 bytes on 802.2/3 frames and RFC 894 Ethernet frames..
""Burnham, Chris"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I've just thought of something .The only part of an 802.3 or EV2 frame
> that is 4 bytes is the FCS. Is the sniffer not reading these byt
Yes, Minimum Ethernet frame is 64 but Sniffers do not include CRC when
displaying packets
Gio
""Burnham, Chris"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> When sniffing a TCP conversation on NAI Sniffer pro. why do ack only
packets
>
FCS. I use EtherPeek these days, which does account for the 4-byte FCS, but
Sniffer does not, as I recall.
Priscilla
At 04:30 AM 6/15/01, Burnham, Chris wrote:
>When sniffing a TCP conversation on NAI Sniffer pro. why do ack only packets
>show a length of 60 bytes when the minimum ether
I don't know all of them, but there is definitly info out there on some
routers, is there any particular router your specifically wanting
this data for? If you search the net or cisco.com for "pps" you
can turn up some stuff.
Brian
On Thu, 23 Aug 2001, Burnham, Chris wrote:
> Does anyone know
Hello,
I have number of deferred packets increasing on my ethernet interface on
C7206vxr. I don't see any noticeable disruptions on the network, but
this pattern bothers me. What am I overlooking ??
Nodir
___
UPDATED Posting Guidelines: http://www.groupstud
Maybe if you include the running-config, forum members may be able to help.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=65252&t=65250
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report
I've never seen that before, but I'd hazard to guess there isn't a
138.168.0.0 network in your routing table. post your routing table.
scott
""Xy Hien Le"" wrote in message
news:[EMAIL PROTECTED]
> Hello Everyone,
>
> I have this router which will give me the debug message everytime I ping a
> c
: [EMAIL PROTECTED]
Subject: IP packets unroutable [7:65250]
Hello Everyone,
I have this router which will give me the debug message everytime I ping
a
connected network:
Every interfaces, ATM, FastEthernet, Serial etc are same results.
Seemed like there are no arp cache for the connect
to synchronize
and be
synchronized by the peer.
--- John Tafasi wrote:
> the debug ntp packets command shows packets sent and
> received with different
> modes. What are these modes? can some one explain?
>
> R5-2503#
> Mar 6 02:42:08.879: NTP: rcv packet from 10.10.10.1
> to 10.1
f Of
John Tafasi
Sent: Saturday, November 30, 2002 11:26 PM
To: Cisco Group Study; ccielab
Subject: ntp packets modes
the debug ntp packets command shows packets sent and received with
different
modes. What are these modes? can some one explain?
R5-2503#
Mar 6 02:42:08.879: NTP: rcv packet
en a problem with the 11050 load balancer dropping packets
from
> http 1.1 browsers? Http 1.0 seem to work fine but 1.1 doesnt seem to send
the
> full header info and the 11050 drops packets like mad.
> Software version 4.00 build 3
> Hardware Major version: 02
> Hardware
$20
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Rajesh Kumar
Sent: Friday, July 25, 2003 1:30 PM
To: [EMAIL PROTECTED]
Subject: Capturing IPv6 packets. [7:73033]
Hello everybody,
I am wondering if there is any tool like Sniffer / Ethereal which
How long ago where the counters cleared on the router. 27 dropped packets
would not be a concern over a large period of time. Same goes for the
FECN's. Tell us when the stats where last cleared.
Matt Street
Network Engineer
USPS-Network Integration and Support
888-877-7662 ext 3798
t far
beyond and this might cause a packet to drop. Given the details below how
can we see what is happening. Say the total packets was 5000 times the
FECN's then this would not be a problem unless the FECN's are really
climbing now.
I would sugest a clear count on the interface than have an
o
our vpn router at my place of employment. Of course with the netgear dsl
router it passes those ipsec packets. I was wondering if anyone has
tried this before and been able to make this happen.
Thanks in advance.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=
Use CAR to limit ICMP down, but still allow it through.
--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
""Barry Kiesz"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> We are currently experiencing a
Have you tried 'TCP Intercept List' to avoid DOS
attacks???
CCNP, MCSE
--- Jason Roysdon wrote:
> Use CAR to limit ICMP down, but still allow it
> through.
>
> --
> Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA,
> Network+, A+
> List email: [EMAIL PROTECTED]
> Homepage: http://jason.artoo.net/
At 02:06 PM 4/28/01 -0400, Muhammed Khalilullah wrote:
>Have you tried 'TCP Intercept List' to avoid DOS
>attacks???
>
>CCNP, MCSE
>
>--- Jason Roysdon wrote:
> > Use CAR to limit ICMP down, but still allow it
> > through.
> >
> > --
> > Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA,
> > Network+,
I have always used CAR for that
an example will be :
interface abc
rate-limit output access-group 140 4500 100
100 100 conform-action transmit exceed-action
drop
access-list 200 permit icmp any any echo-reply
regards,
suaveguru
--- Carroll Kong wrote:
> At 02:06 PM 4/28/01
Hi,
Can someone help me find out who (router or host) will
retransmit the packets if they were lost in the cloud
while using:
a. X.25
b. HDLC
c. SDLC
d. Frame-relay
e. DLSw+
f. ATM
g. T1, E1
to connect from one router to another.
HostRoutercloudRouterHost
Thanks
Hi all,
We have reason to believe we are experiencing Dropped packets
between us and our remote branch. What I need
Is proof, so I can go to my manager and say, "here, look at this". He
believes just because he looks at the router and does a "show frame pvc"
>I am getting lot of broadcast packets on FastEthernet interface when I >do
>sh interface on cisco 7505.
What does, "Lots," mean? Broadcasts are part of life in a network, cf. ARP,
GNS, SAP, RIP updates, etc.
>I also get "input errors" on that interface
What
input 00:00:06, output 00:00:06, output hang never
Last clearing of "show interface" counters 2d18h
Queueing strategy: fifo
Output queue 0/40, 0 drops; input queue 0/75, 0 drops
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
28070 pa
Newbie question
If a device is using the "fast switching" method and only the first packet
is handled* by the router, does the switch look any deeper than the frame
level to determine the switching for the remaining packets/frames? How does
it read the rewritten frame to know that it s
I would like to use router to generate data packets (IP and/or IPX) what
commands can accomplish this?
Thank you
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8347&t=8347
--
FAQ, list archives, and subscription in
Hi All,
I have a PVC with a large amount of packets recieved with the DE bit
set, and in the mornings the users complain of slow access.
This is logical, as they are frequently over their CIR, and I guess
the Frame cloud must be congested in the mornings.
What I was looking for was some sort
interface, the request times out.
I setup debug SNMP packets on the router and performed the SNMP get commands
again to the router.
The router sent the required information for the dialer interface and
returned a "parsing error' for both the ethernet interface and the loopback
inter
carrier and if it is free send the packet.
Stefano
> -Original Message-
> From: Nodir Nazarov [mailto:[EMAIL PROTECTED]]
> Sent: mercoledì 30 agosto 2000 18.29
> To: [EMAIL PROTECTED]
> Subject: deferred packets on eth on C7206vxr
>
>
> Hello,
>
> I h
Even if I have 2 routers only crossed over on ethernet cable ? Or, should I
have full duplex enabled to avoid deferred packets ?
Nodir
Bosio Stefano wrote:
> Deffered packet is normal on a CSMA/CD network like ethernet.
> When packet must be trasmitted out on a ethernet interface the c
Nodir,
Deferred Packets isn't necessarily a fault.
Presumably the ethernet interface is set to half
duplex ? In which case collisions are are normal
everyday event.
Deferred in this instance is just saying I cannot send
just now because something else is
happening/colliding/jabbin
tly*, then your utilization is going up for a reason
and you might want to find out what that reason is.
Of course, the other statistics Phil mentions would be going up dramatically
along with the deferred packets if this is your situation...
Dale
[=`)
>From: Phil Barker <[EMAIL PROTECTED]>
Thank you for your comments on it -
only deferred packets and collisions are increasing. No drops or any other
errors. I have about 5-6 packets/second deferred and same approximate number of
collisions (not late collisions). Approximate traffic flow (both send and
receive) is about 5-6 MB per
Is it possible to cause the IP precedence of a GRE packet to be the same as
the IP precedence of the packet which it encapsulates?
I have a client who is passing real-time as well as normal data over a 3DES
encrypted tunnel. I have had to resort to using separate
tunnels for the two data streams,
I turned on some debugging and I am seeing this message in my log files.
Does anyone know the cause or how to correct?
IP precedence 0 received on voice but should have been on data
--Mark
Snips of the router config:
class-map match-all voip
match access-group 100
policy-map llq
class vo
VPN does not work when IPSEC packets are NAT'd. One of the reasons why this
doesn't work is that packet authentication will fail when the packet is
NAT'd - the calculated hash will not match after NAT has been applied.
Charles
-Original Message-
From: Elijah Savage
To: [
Are you sure- my PIX 506 does it with no problem ???
- Original Message -
From: Charles Manafa
To:
Sent: Thursday, April 12, 2001 8:37 AM
Subject: RE: Passing IPSEC packets on dsl [7:321]
> VPN does not work when IPSEC packets are NAT'd. One of the reasons why
this
> does
]
Subject: Re: Passing IPSEC packets on dsl [7:321]
Are you sure- my PIX 506 does it with no problem ???
- Original Message -
From: Charles Manafa
To:
Sent: Thursday, April 12, 2001 8:37 AM
Subject: RE: Passing IPSEC packets on dsl [7:321]
> VPN does not work when IPSEC packets are NA
ge [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 12, 2001 7:11 AM
To: [EMAIL PROTECTED]
Subject: Passing IPSEC packets on dsl [7:321]
All,
I purchased a 1605 from eBay for my home lab. I decided to play with it
a bit on my DSL circuit. I am using NAT on this router, and everything
works f
use the tunnel to connect to the private network. This
configuration works.
Charles
-Original Message-
From: Circusnuts
To: [EMAIL PROTECTED]
Sent: 12/04/01 14:07
Subject: Re: Passing IPSEC packets on dsl [7:321]
Are you sure- my PIX 506 does it with no problem ???
- Original Message
hat these DSL router
>manufacturers have done to make it work. Surely if someone like netgear
>can make it work Cisco can.
>
>-Original Message-
>From: Circusnuts [mailto:[EMAIL PROTECTED]]
>Sent: Thursday, April 12, 2001 9:08 AM
>To: [EMAIL PROTECTED]
>Subject: Re: P
ginal Message -
From: "Circusnuts"
To:
Sent: Thursday, April 12, 2001 8:07 AM
Subject: Re: Passing IPSEC packets on dsl [7:321]
> Are you sure- my PIX 506 does it with no problem ???
>
> - Original Message -
> From: Charles Manafa
> To:
> Sent: Thursday, Apr
o make sure all outbound
ports are opened up correctly on the router.
Not the prettiest solution but it just might work ;)
Allen
- Original Message -
From: "Curtis Call"
To:
Sent: Thursday, April 12, 2001 10:46 AM
Subject: RE: Passing IPSEC packets on DSL [7:321]
> If the DS
At 11:45 AM 4/12/01 -0400, Charles Manafa wrote:
>I believe the issue here is a VPN client initiating an IPSEC tunnel behind a
>NAT device. This configuration does not work.
>
>A Cisco router or PIX can do a NAT then establish IPSEC tunnel with a remote
>end point. Once the tunnel is created, the
(216.142.0.1 255.255.255.252) - (216.142.0.2
255.255.255.252) Router - Internal network.
-Original Message-
From: Elijah Savage [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 12, 2001 9:47 AM
To: [EMAIL PROTECTED]
Subject: RE: Passing IPSEC packets on DSL [7:321]
Yeah his comment makes
]
Subject: RE: Passing IPSEC packets on DSL [7:321]
Is there any way to do NAT on a PIX or a Cisco router if you only have
one
usable IP address? I perused CCO, and the most minimalistic NAT/PAT
config
I can find still requires 2 (1 interface, one global) addresses. The
Linksys/Netgear jobbies do it
1 - 100 of 192 matches
Mail list logo
